Metodología ágil para la gestión de riesgos informáticos

Abstract

This article presents a comprehensive methodology for IT risk management based on globally accepted standards suchas ISO 31000 and ISO / IEC 27005, which states the requirements for an adequate risk management; however, they donot indicate, at least in a clear manner, the way in which such management can be carried out. Recommendations andgood practices from other international risk management standards and guidelines are therefore included. Its validity isverified through the application of the proposed methodology in an industrial food company; Furthermore, the work teamthat applied the methodology had at its disposal the suggested tools that helped to technically assess the risks accordingto their occurrence probability, their consequences, and safety dimensions affected.